rsclarke/Setup cosign
Downloads and installs sigstore/cosign with mandatory release signature verification (Linux/macOS only)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| version | Version of sigstore/cosign to install (e.g., v3.0.6). If not specified, the latest release will be used. | no | "" |
| use-cache | Whether to restore and save the GitHub Actions cache for the cosign tool cache. | no | true |
Outputs
| name | description |
|---|---|
| cosign_path | Path to the installed cosign binary |